key distribution center

The Key Distribution Center (KDC) issues tickets and generates session keys that allow users to authenticate against services.

The KDC consists of two parts:

• The Authentication Server (AS) verifies a client’s identity and issues TGTs
• The Ticket Granting Server (TGS) confirms that a user has access to the requested service using his TGT and returns service ticket (also happens to be called TGS)